MAL-2025-69701 Malicious code in official-green-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8bd057ebec4d6117c8acb3fa003625c4abef79d72912aa1263306073f1a27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67272 Malicious code in collective-black-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba28f57509daaef6f5f46f42995d30a516865e558b818eaf4b07c4edcbb4a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-aquamarine-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595653987fa31a45a30f71e6e139ede2fca9020e7ac69f179384ff61a7cdb319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware-coral-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a68e1958cb77777376029a01e978ce5bacc6e734eb6894c3dad660a237249b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral-beige-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddb1c4d51d676ff9616af80793021d2234b5c5df60da58ae7193c0eb66d583a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-crimson-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ecf1921767e89ded31d99709191b8c6cede4da7611c0c0d65c4cbd102303fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-plum-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd0ce160031cb611132b6f1e7601cb682d5b10cd5962f061b593085644d205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-turquoise-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af907267455f9fcbbcb270b63e8144b808f98c148adbcc29c881673fcb807f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formal-tan-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b2facced6d66e1651bc6e2c5f96d212ae8c3175379c52b8fb2a8f4531c2d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious-beige-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d6da531933299e776b9c934ce1094e1ed2633d9bd94b35e2d1803cda892fa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygomorphic-orange-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388e478470e7723138a587626a1b3b5365c62ca768c9e6184dd7cdb3be5c62aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted-indigo-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34307d7160b686e7ecb3e8d46496c8a77d5a210621a956e0a4b27659776aa012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ill-indigo-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b30cea900f1631201a6a311183ede185a9365548fd258fb64cdd5147830b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-aquamarine-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693a11aff62626077e317cad975a8777fdcfa74a0ac6bbac5448af479d6983c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathematical-tomato-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f979a30b627cdaffb8d1c1f5f4e11cf44fd1b8c09ca11ed587079b047a9be2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered-sapphire-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b26954e9abb77fe3981a70a04b4cfb6dab0be477cc81cfbc0e74fd59299120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66716 Malicious code in agricultural-sapphire-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cf13a2a8728d231932d9f4933cac62ac032b213314737f3d85b0f9b5e7477b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70760 Malicious code in specified-black-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147a89f13c059a0f1f900ef4f18e322c2dd43ce1233b0b963be734f5980dd064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67644 Malicious code in decent-amaranth-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d41f6fb67e22f864c809ff128842576c012e408785ec74791d49cf9e412925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68029 Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...